$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa File: d401cf92-6d56-4309-80f7-397ad3dbd150.roa (raw, json) Hash identifier: sakiZ7y4orh+9rr706xMbF/O1hA8+JKyJwNq2ZXByEI= Subject key identifier: EC:3C:A2:6B:C8:04:04:AF:13:C4:E3:E1:3D:91:F1:D3:AB:03:99:D1 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 68194F48FB57F95588295F21850784D16E2B49C0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa Signing time: Mon 18 Aug 2025 15:00:22 +0000 ROA not before: Mon 18 Aug 2025 15:00:22 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 110.238.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:19:4f:48:fb:57:f9:55:88:29:5f:21:85:07:84:d1:6e:2b:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 18 15:00:22 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=817a2a4cf02dee15c3426e518405153281926284e579f2f7e1438b1b2e20c192, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:4a:a4:74:b5:69:51:cb:d4:2a:bb:a4:1f: 51:e6:82:4e:5d:1a:1c:eb:8f:4e:a4:12:a1:7b:02: 3b:39:ee:cc:04:2c:ac:46:88:66:4e:17:fc:36:03: b9:df:25:47:d5:13:bc:98:cb:bf:fd:21:55:da:7f: 63:5e:48:29:a6:9c:2c:06:ae:33:b7:f5:67:6d:33: 3c:cb:08:17:d8:39:5d:7b:9e:14:83:b6:54:61:c2: 4d:aa:aa:2a:33:b5:10:5e:0b:24:6f:a7:a1:95:db: da:65:5a:e2:96:c9:be:70:2d:47:b9:a9:4e:47:d3: a7:51:73:a6:be:72:ce:3c:c9:9c:3c:83:29:0b:73: 32:c2:ac:9b:04:d7:fe:3d:e3:d7:b1:b3:ac:0b:c7: 16:60:02:00:0b:05:00:09:89:2c:88:71:26:40:6a: 1f:a5:ef:1d:aa:58:14:dd:03:d7:67:f9:07:46:14: 49:18:22:0a:96:c8:d0:4a:26:23:cd:a7:2f:51:56: 7d:11:09:65:8e:b6:35:7b:9d:e7:b4:fd:71:a3:b0: f3:2b:0e:94:c9:dc:7e:d4:43:c3:1a:a4:97:a6:24: ec:bb:a3:36:c4:92:23:09:a6:3c:25:18:f2:ec:4c: 9c:49:f1:cd:e9:cb:12:5b:c4:d7:b4:eb:16:22:44: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3C:A2:6B:C8:04:04:AF:13:C4:E3:E1:3D:91:F1:D3:AB:03:99:D1 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.238.2.0/23 Signature Algorithm: sha256WithRSAEncryption 63:af:62:e2:04:b4:1f:62:2e:52:80:32:25:a3:e0:57:6b:3a: 2f:ea:f8:f4:c2:41:30:a2:6a:db:e9:5d:bd:17:1a:1d:37:d8: bd:be:9b:86:51:87:a7:e6:98:b5:32:b8:e6:96:a4:7e:56:d4: 4a:6d:69:0e:7b:a9:f7:56:96:65:08:ce:50:66:d5:8b:8c:de: 7e:cb:12:fd:2e:47:0f:32:7f:9a:4d:ad:35:9a:29:e6:fa:b9: f7:fe:ef:73:c8:56:8a:bb:80:e9:1a:b2:ed:51:f1:a8:95:38: 0f:96:c2:4f:01:f1:a3:c1:1c:43:43:3b:3e:bd:f2:d5:b7:5f: 19:37:dc:32:fe:45:b4:97:e6:e8:22:d1:fd:c4:b0:9a:9c:86: 9e:12:50:39:28:7a:19:72:14:b3:de:ca:b0:20:a6:69:a4:27: 84:2b:49:eb:cf:12:1a:5d:5b:81:ff:fd:13:23:b7:08:3e:7c: 2a:12:7d:dc:08:1d:a7:a5:b6:3f:81:a6:94:8b:7e:e2:38:78: e1:d3:99:55:7d:d8:65:cd:39:ac:35:26:20:fe:98:4b:9b:4b: 9d:92:89:49:33:e9:71:ca:82:4e:52:73:b4:56:9a:a9:a7:a7: d4:c2:78:d4:3b:44:88:03:a6:a7:8a:bd:17:f8:27:64:8a:cf: 99:2a:fc:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaBlPSPtX+VWIKV8hhQeE0W4rScAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODE4MTUwMDIyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTdhMmE0Y2YwMmRlZTE1YzM0MjZlNTE4NDA1MTUzMjgx OTI2Mjg0ZTU3OWYyZjdlMTQzOGIxYjJlMjBjMTkyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4S0qkdLVpUcvUKrukH1Hmgk5dGhzrj06kEqF7Ajs57swE LKxGiGZOF/w2A7nfJUfVE7yYy7/9IVXaf2NeSCmmnCwGrjO39WdtMzzLCBfYOV17 nhSDtlRhwk2qqioztRBeCyRvp6GV29plWuKWyb5wLUe5qU5H06dRc6a+cs48yZw8 gykLczLCrJsE1/4949exs6wLxxZgAgALBQAJiSyIcSZAah+l7x2qWBTdA9dn+QdG FEkYIgqWyNBKJiPNpy9RVn0RCWWOtjV7nee0/XGjsPMrDpTJ3H7UQ8MapJemJOy7 ozbEkiMJpjwlGPLsTJxJ8c3pyxJbxNe06xYiRDRtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7Dyia8gEBK8TxOPhPZHx06sDmdEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2Q0MDFjZjkyLTZkNTYtNDMwOS04MGY3LTM5N2FkM2RiZDE1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFu7gIwDQYJKoZIhvcNAQELBQADggEBAGOvYuIEtB9iLlKAMiWj4FdrOi/q +PTCQTCiatvpXb0XGh032L2+m4ZRh6fmmLUyuOaWpH5W1EptaQ57qfdWlmUIzlBm 1YuM3n7LEv0uRw8yf5pNrTWaKeb6uff+73PIVoq7gOkasu1R8aiVOA+Wwk8B8aPB HENDOz698tW3Xxk33DL+RbSX5ugi0f3EsJqchp4SUDkoehlyFLPeyrAgpmmkJ4Qr SevPEhpdW4H//RMjtwg+fCoSfdwIHaeltj+BppSLfuI4eOHTmVV92GXNOaw1JiD+ mEubS52SiUkz6XHKgk5Sc7RWmqmnp9TCeNQ7RIgDpqeKvRf4J2SKz5kq/Gs= -----END CERTIFICATE-----Generated at Sat Aug 23 08:28:46 2025 by rpki-client